MENTAL MODEL · M1756

Downgrade Attack

TechnicalHigh supportCybersecurity

Included

Version 1.0.0 · Updated 2026-07-30

CORE DEFINITION

An attacker forces the client to abandon a high-version security protocol (such as HTTPS) and fall back to an older, vulnerable protocol (such as HTTP), then exploits the old vulnerabilities to attack.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

Prevent regression. In reforms, conservative forces will try to make you 'try the old ways again'. Once you agree to downgrade, the ills of the old system will immediately resurge. You must cut off the bridge for fallback.

anchor

Anchor fast decisions

A downgrade attack refers to an attacker, through interference or deception, forcing a system, protocol, or conversation to 'downgrade' from a high-security/advanced state to a more vulnerable state, and then exploiting its weaknesses. Its essence is to create conditions where the opponent cannot maintain optimal defense.

MINIMUM ACTION

In progress 0/1

Practice this model in one real situation:

Identify the target's current high-security state and dependencies. Create disturbances to force it to fall back (e.g., block new protocols, fake incompatibility). Launch the actual attack in the lowered protection state after the downgrade.

Check to track your progress (stored locally)

Learning progress0%

account_treeGenealogyexpand_more

menu_bookReferencesexpand_more

Source support: Explicit

link
zh.wikipedia.orghttps://zh.wikipedia.org/wiki/%E9%99%8D%E7%BA%A7%E6%94%BB%E5%87%BBZH · Explicit
verified

RELATED MODELS